Is the Debian Lenny PHP5 package secure?

Question

For instance I'm running the php5 package using apt-get install php5. The reported version is: PHP/5.2.6-1+lenny9

However, there's currently listed 53 vulnerabilities for PHP/5.2.6 on CVE:

Here's my question. Is PHP/5.2.6-1+lenny9 patched against these vulnerabilities? (Perhaps that's what the +lenny9 part is for?) How do I check?

For instance, how would I check whether the recent EXIF vulnerability is patched in the current Debian Lenny package?

weeheavy · Accepted Answer · 2011-03-08 09:20:52Z

3

answered Mar 8, 2011 at 9:20

weeheavy

4,0791 gold badge27 silver badges41 bronze badges

Add a comment |

1 Answer 1